medium4.8
CVE-2024-30215
The Resource Settings page allows a high privilege attacker to load exploitable payload to be stored and reflected whenever a User visits the page.
Impact
The Resource Settings page allows a high privilege attacker to load exploitable payload to be stored and reflected whenever a User visits the page. In a successful attack, some information could be obtained and/or modified. However, the attacker does not have control over what information is obtained, or the amount or kind of loss is limited.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.